NIST 800-53 REV 5 • ASSESSMENT, AUTHORIZATION, AND MONITORING
CA-9(1) — Compliance Checks
Perform security and privacy compliance checks on constituent system components prior to the establishment of the internal connection.
CMMC Practice Mapping
No direct CMMC mapping
NIST 800-171 Mapping
No direct NIST 800-171 mapping
Related Controls
Supplemental Guidance
Compliance checks include verification of the relevant baseline configuration.
Practitioner Notes
This enhancement requires compliance checks before allowing internal system connections — verifying that devices meet security requirements before they join the network.
Example 1: Use Microsoft Intune compliance policies to verify that devices meet security baselines (encryption enabled, antivirus current, OS patched) before granting network access.
Example 2: Deploy 802.1X network access control on your switches so that devices must authenticate and pass a health check before being allowed onto the production network.